Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.mft
File: X0qPBO8v6-VPnbapovhWWUtuLwg.mft (raw, json)
Hash identifier: HlFwS4ExX2UulrM+Ib+1ZtL1h4zs70yYkS+avaQSb5U=
Subject key identifier: 37:31:30:47:00:48:6E:2B:50:0E:7E:E0:96:D7:D1:B7:E1:7E:3D:BF
Authority key identifier: 5F:4A:8F:04:EF:2F:EB:E5:4F:9D:B6:A9:A2:F8:56:59:4B:6E:2F:08
Certificate issuer: /CN=5f4a8f04ef2febe54f9db6a9a2f856594b6e2f08
Certificate serial: 019A2409E1EB8B491AF0B3CE6D674033CC47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X0qPBO8v6-VPnbapovhWWUtuLwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.mft
Manifest number: 1296
Signing time: Mon 27 Oct 2025 05:00:18 +0000
Manifest this update: Mon 27 Oct 2025 05:00:18 +0000
Manifest next update: Tue 28 Oct 2025 05:00:18 +0000
Files and hashes: 1: X0qPBO8v6-VPnbapovhWWUtuLwg.crl (hash: Ckc8gDnRHpbhZo+NneqV99J5tc5/ZjAHyyqbGwyMYa0=)
2: tcVBxEoI8K26M5HUmpNDgzDsjFI.roa (hash: pBhVA7X+K6W5y7S3g4l8PMvEmZqEr0C1POlQ37i6fpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/X0qPBO8v6-VPnbapovhWWUtuLwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 05:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:09:e1:eb:8b:49:1a:f0:b3:ce:6d:67:40:33:cc:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f4a8f04ef2febe54f9db6a9a2f856594b6e2f08
Validity
Not Before: Oct 27 05:00:18 2025 GMT
Not After : Oct 28 05:00:18 2025 GMT
Subject: CN=3731304700486e2b500e7ee096d7d1b7e17e3dbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8a:af:66:38:d6:62:58:57:45:dd:c8:3b:a9:
1e:c4:0c:48:a3:57:05:32:92:87:5c:6d:bb:40:59:
64:08:77:92:3b:89:2a:56:c3:5c:95:2d:4c:1d:60:
92:5e:f5:5a:fe:46:da:b3:8d:a1:58:78:72:84:41:
0c:1b:64:21:78:eb:ba:37:e5:c8:77:55:9d:ef:70:
c7:42:5e:d5:76:91:6a:30:b8:91:be:27:e7:1e:86:
76:51:c4:3d:dd:36:bf:09:f1:40:31:62:80:ee:70:
ca:65:1f:76:7b:64:52:cc:8d:a5:dc:c3:32:64:f1:
9d:e8:8a:08:6b:a4:aa:2e:e0:3b:5f:4a:1a:44:24:
bd:97:ef:50:26:40:1b:b3:5f:ac:57:2d:a2:c6:52:
06:2a:6d:e3:ab:34:e9:4b:f9:0d:e8:c3:fe:15:c3:
01:40:14:3c:42:07:1d:f4:6f:a0:da:dc:ea:47:42:
5f:c1:d8:67:d9:3e:f6:4d:3c:74:19:4d:2e:c0:b4:
3d:ba:eb:6c:fa:d9:2c:a8:eb:3f:d3:ca:d7:10:bc:
b2:82:9b:6a:93:c1:92:cb:d7:99:4a:a6:cb:63:e5:
76:b8:97:29:f2:2f:50:85:95:e2:a4:e7:4d:98:17:
77:b3:f1:4a:51:ca:8e:50:63:a1:50:e3:fd:10:f5:
3d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:31:30:47:00:48:6E:2B:50:0E:7E:E0:96:D7:D1:B7:E1:7E:3D:BF
X509v3 Authority Key Identifier:
keyid:5F:4A:8F:04:EF:2F:EB:E5:4F:9D:B6:A9:A2:F8:56:59:4B:6E:2F:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X0qPBO8v6-VPnbapovhWWUtuLwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:ce:1b:cc:e2:6a:02:b9:ae:77:f0:af:58:b7:87:f3:0f:4d:
2a:b7:37:f6:a7:53:3a:97:d3:42:de:69:77:15:36:37:c6:30:
fc:91:71:30:0b:90:5f:c0:d4:fe:f6:d3:28:d1:8a:ca:35:5d:
b8:f0:39:47:3d:ba:57:ce:5d:bb:5b:9c:11:3d:b4:ee:6e:35:
08:2e:84:6e:1f:48:33:ff:50:61:b1:fe:c1:b3:2a:78:ee:8e:
5b:cf:19:88:c8:c2:4d:18:26:96:cc:77:d9:24:5d:91:17:3f:
26:6e:78:d4:4c:d0:88:10:7f:3b:39:87:f4:5b:48:3d:f1:9f:
a5:ad:f2:1b:76:73:6d:20:58:8f:72:a6:49:fe:49:fb:41:c6:
09:33:32:82:7a:94:cd:0a:f1:bf:4d:77:41:e8:5a:29:3d:60:
d0:28:1d:bd:de:c2:4c:6d:3c:ec:ee:e9:75:9a:d3:e8:af:1e:
ed:f7:f6:2f:b6:85:9b:c5:e5:47:a7:c9:d0:75:a1:0e:4d:a8:
f7:ae:74:be:32:9e:2e:a4:6b:77:ff:df:dd:3a:19:ae:07:25:
da:a0:7a:3f:d1:ce:f3:e5:36:12:3e:b6:c5:35:41:9a:73:98:
7d:89:5a:2c:e2:cb:e6:35:a1:bf:4b:0a:bb:ef:88:ad:b1:76:
30:60:02:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:13:02 2025 by rpki-client